Interpretation Conflict

Overview @fastify/middie is a Middleware engine for Fastify Affected versions of this package are vulnerable to Interpretation Conflict via incorrect prefix-path joining in the use function, where middleware mount paths are concatenated with the Fastify route prefix using a logic that diverges fr...

PT-2026-118649

Name of the Vulnerable Software and Affected Versions @fastify/middie versions 9.0.0 through 9.3.5 Description The use function joins a path-scoped middleware mount path to the plugin scope prefix in a manner that may diverge from the path served by the Fastify router. This occurs primarily when...

@fastify/middie: Processing logic error vulnerability

The @fastify/middie version from 9.0.0 to 9.3.5 contains a processing logic vulnerability. This vulnerability arises from the use function, which may deviate from the path provided by the Fastify router when concatenating the mount path of the middleware with the plugin scope prefix. As a result,...

PT-2026-110539

Name of the Vulnerable Software and Affected Versions Zen Cart versions prior to 2.2.3 Description Code injection is possible via the Administrative Module Management component. The issue exists in the zen call function function within the admin/includes/functions/general.php file. A remote...

Allocation of Resources Without Limits or Throttling

Overview liquidjs is an A simple, expressive, safe and Shopify compatible template engine in pure JavaScript. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through improper validation of range values in the use function. An attacker can...